Technical Information
- %TEMP%\dbe0.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\dbe0.tmp' --ping<Full path to file> 8435C27A28A90E736BACA4BC707BCFEA9C8737DF3F864CB190F8035FBF80411229A27B2C972A396AA03B20A6B3098EADDCC63CF096924C901A9D7E31873C5816
- '%TEMP%\dbe0.tmp' --ping<Full path to file> 8435C27A28A90E736BACA4BC707BCFEA9C8737DF3F864CB190F8035FBF80411229A27B2C972A396AA03B20A6B3098EADDCC63CF096924C901A9D7E31873C5816' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"